CVE-2019-5440: revive-adserver revive_adserver

Vulnerability summary

CVE-2019-5440 is a high (CVSS 8.1) vulnerability in revive-adserver revive_adserver. EPSS estimates a 1.58% chance of exploitation in the next 30 days, higher than 75.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 28-05-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality. In lib/OA/Dal/PasswordRecovery.php, the function generateRecoveryId() generates a password reset token that relies on the PHP uniqid function and consequently depends only on the current server time, which is often visible in an HTTP Date header.

• CWE-338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.